Remote Senior Security Incident Response Analyst

Accendra Health; Richmond (VA); Remote; USD 86,000 - 105,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Vision care

PTO (Paid Time Off)

401(k) Plan

Life insurance

Disability coverage

Parental leave

Domestic partner benefits

Well-being programs

Job summary

Accendra Health is seeking an L3 Security Incident Response Analyst to own incidents end to end, coordinating containment, eradication, and recovery across multiple domains. You will provide clear leadership to L1/L2 teams and translate incidents into lasting detections and process improvements.

You will work with Privacy, Compliance, Legal, and IT teams to manage PHI/PII incidents and drive breach risk assessments. A strong emphasis on communication and executive briefings is required.

Qualifications

• 5+ years in security operations or incident response; 2+ years leading high-severity investigations.
• Deep expertise in SIEM, detection engineering, and log source onboarding (e.g., Sentinel, Splunk).
• Experience with PHI/PII or regulated data incidents and breach risk assessments.

Responsibilities

• Lead high-severity investigations across endpoint, identity, email, network, cloud, and SaaS telemetry.
• Make containment decisions and drive eradication and recovery.
• Lead communications to CISO and stakeholders; write incident reports and post-incident reviews.
• Tune detections and write detection playbooks; reduce false positives and dwell time.
• Mentor L1/L2 analysts; maintain runbooks and escalation criteria.
• Participate in on-call rotation and tabletop exercises.

Skills

SIEM / detection

Identity & access

Email security

Endpoint security

Network security

MITRE ATT&CK

Executive communication

Judgment & containment

Tools

Microsoft Sentinel

Rapid7 InsightIDR

Splunk

Defender for Endpoint

CrowdStrike

Job description

Accendra Health is seeking an L3 Security Incident Response Analyst to own incidents end to end, coordinating containment, eradication, and recovery across multiple domains. You will provide clear leadership to L1/L2 teams and translate incidents into lasting detections and process improvements.

You will work with Privacy, Compliance, Legal, and IT teams to manage PHI/PII incidents and drive breach risk assessments. A strong emphasis on communication and executive briefings is required.